Security audit
Security checks for vulnerabilities and agentic risk
This is a local diagram-generation skill with no executable installer, network access, credential handling, or persistence in the inspected artifacts.
Install this if you want a Chinese-first local architecture-diagram helper. Review ambiguous requests before letting it generate output, and avoid giving it sensitive files unless those files are explicitly needed for the diagram.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<div class="canvas">
<!-- 头部 -->
<div class="header">
<h1>系统架构图</h1>
<div class="tagline">一句话描述本图聚焦的脉络与范围</div>
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<div class="canvas">
<!-- 头部 -->
<div class="header">
<h1>系统架构图</h1>
<div class="tagline">一句话描述本图聚焦的脉络与范围</div>
The README describes a wide activation scope but does not define clear boundaries or negative cases, so the skill may be invoked for requests that merely mention related terms rather than actually asking for a diagram. In an agent environment, this can degrade reliability, override more appropriate skills, and create confusing or unintended outputs even though the tool itself is local-only.
The README describes a wide activation scope but does not define clear boundaries or negative cases, so the skill may be invoked for requests that merely mention related terms rather than actually asking for a diagram. In an agent environment, this can degrade reliability, override more appropriate skills, and create confusing or unintended outputs even though the tool itself is local-only.
The skill metadata and instructions are written to operate in Chinese and do not indicate that the user’s preferred language will be honored. This can cause outputs or clarifications in an unexpected language, creating misunderstanding and reducing user control, especially for safety-relevant clarification steps.
The trigger description includes very broad phrases such as “画个图”, “系统图”, and English terms like “draw/diagram/architecture”, which can overlap with ordinary conversation and unrelated requests. This can cause the skill to activate unexpectedly, increasing the chance it handles prompts outside its intended scope and interferes with safer or more appropriate skills.
The title and all instructions are written exclusively in Chinese, and the wording presents the guidance as mandatory specification. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
The entire skill guidance is written as mandatory Chinese-facing instructions, including required response phrasing in Chinese, with no indication that the user can choose another language. This creates a natural-language locale policy issue because it implicitly constrains interaction language without opt-in or justification.
This markdown file contains all operational instructions in Chinese and does not provide any opt-in, alternative language, or explanation that the skill is intended only for Chinese-speaking users. That can violate a language/locale policy when users are not explicitly given a choice.
The entire FAQ is written in Chinese and presents mandatory operating guidance in that language, but it does not indicate that Chinese is optional or that the skill is intentionally restricted to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill file is written in Chinese and presents operational instructions exclusively in that language, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy criteria, forcing a specific language without opt-in is a natural-language policy concern.
This markdown file contains user-facing instructions exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language. That creates a natural-language policy concern because it effectively forces a specific language without explicit user choice or justification.
The document declares lang="zh-CN", which hard-codes a specific language/locale for the skill output. Under the policy, locale restrictions should either be user-selectable or clearly justified as region-specific; this file provides neither.
This markdown file is entirely written in Chinese and does not indicate that other languages are supported or that Chinese is required for a region-specific purpose. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown guide uses only Chinese for all instructions and headings, with no note that the language is optional or intended for a Chinese-only audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.